chromium-browser: use-after-free in PDFium

Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...

Aw, Snap! This 16-Character String Can Crash Your Google Chrome

Remember when it took only 13 characters to crash Chrome browser instantly? This time, it takes 16-character simple URL string of text to crash Google Chrome instantly. Yes, you can crash the latest version of Chrome browser with just a simple tiny URL. To do this, all you need to do is follow on...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the PrintWebViewHelper class in the components/printing/renderer/printwebviewhelper.cc module of the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures by triggering embedded...

The vulnerability in the Google Chrome browser allows a hacker to replace the SSL icon.

The vulnerability of the UnescapeURLWithAdjustmentsImpl implementation in the net/base/escape.cc component of the Google Chrome browser is related to security configuration errors. Exploiting this vulnerability could allow an attacker, operating remotely, to replace the SSL certificate by adding...

The vulnerability of Google Chrome allows a hacker to replace the content of the browser window.

The vulnerability of Google Chrome is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the browser window’s content using a specially crafted application...

UBUNTU-CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

UBUNTU-CVE-2015-1300

The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive...

The vulnerability of the Google Chrome operating system, which allows a perpetrator to trigger a service failure

The vulnerability of Google Chrome’s regular expression implementation is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using JavaScript code...

The vulnerability of Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the LocalFrame::isURLAllowed function core/frame/LocalFrame.cpp in the Google Chrome browser component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure by using a specially crafted Java scrip...

chromium-browser: Spell checking dictionaries fetched over HTTP in unspecified

The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related...

chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified

Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown,...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-04884)

Google Chrome is a web browser developed by the American company Google Google. A cross-site scripting vulnerability exists in the 'V8ContextNativeHandler:: V8ContextNativeHandler:: GetModuleSystem' function in the extensions/renderer/v8contextnativehandler.cc file in Google Chrome versions prior...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2015-04885)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A security vulnerability exists in Blink used in versions of Google Chrome prior to 44.0.2403.89, which stems from the program failing to set th...

CVE-2015-1268

CVE-2015-1268 refers to Blink via bindings/scripts/v8_types.py in Chrome before 43.0.2357.130, where the creation context for a return value’s DOM wrapper was not correctly selected, enabling a remote attacker to bypass the Same Origin Policy through crafted JavaScript (e.g., data: URLs). Connect...

UBUNTU-CVE-2015-1266

content/browser/webui/contentwebuicontrollerfactory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as...

UBUNTU-CVE-2015-1269

The DecodeHSTSPreloadRaw function in net/http/transportsecuritystate.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string...

UBUNTU-CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

The vulnerability of Google Chrome browser allows a perpetrator to bypass the sandboxing mechanism or trigger a service failure.

The common/partialcircularbuffer.cc file in Google Chrome’s browser contains errors when dealing with pointers. As a result, attackers may bypass the sandbox mechanism or cause failures in the processing of large data writes using the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrit...

The vulnerability of Google Chrome browser allows a perpetrator to replace data.

The implementation of the spelling checking function in the Google Chrome browser does not require the use of a secure HTTPS connection. As a result, those who control network traffic can replace the elements of the dictionary...